Live › vulnerability › CVE-2026-91478
Go to dashboardOracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 has a flaw that lets a low-privileged authenticated user take over the application over HTTP (CVSS 8.8). Fixed in Oracle's October 2026 Critical Patch Update. No exploitation or public PoC found.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| PeopleSoft Enterprise SCM Strategic Sourcing | vendor | 9.2 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Strategic Sourcing. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise SCM Strategic Sourcing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91478")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.